The vulnerability in the web interface of the microprogramming software for TP-Link Archer C50 allows a intruder to gain unauthorized access to the credentials of the target Wi-Fi system.

The vulnerability of the web-based management interface for TP-Link Archer C50 wireless routers involves the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the credentials of the target Wi-Fi system...

Siemens SICAM A8000 CP-8031 and CP-8050 Firmware Decryption Vulnerability

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply. A firmware decryption vulnerability exists in the Siemens SICAM A8000 CP-8031 and CP-8050 due to the fact that the affected devices contain a secure element...

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

PT-2024-35944 · Unknown · Cpci85 Central Processing/Communication

Name of the Vulnerable Software and Affected Versions: CPCI85 Central Processing/Communication versions prior to V05.30 Description: A vulnerability has been identified in the CPCI85 Central Processing/Communication devices. The affected devices contain a secure element connected via an unencrypt...

Siemens CPCI85 Central Processing 安全漏洞

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply. A firmware decryption vulnerability exists in the Siemens SICAM A8000 CP-8031 and CP-8050 due to the fact that the affected devices contain a secure element...

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

Oxide 安全漏洞

Oxide is a cloud platform from Oxide, Inc. A security vulnerability exists in versions prior to Oxide 6 that stems from having unencrypted control plane data storage...

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

CVE-2024-55582

CVE-2024-55582 affects Oxide prior to version 6, where the control plane datastores are unencrypted. Root cause: storage of control plane data without encryption. Impact (per sources): potential exposure or modification of sensitive control-plane information, reflected in the CVSS vector (high co...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the storage of sensitive information in unencrypted form, allowing attackers to gain access to confidential data.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the storage of passwords in an unencrypted form during session data. Exploiting this vulnerability can allow attackers to gain access to confidential information...

PT-2024-9343 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the storage of critical information in an unencrypted manner in the web interface of the TP-Link Archer C50 Wi-Fi router. This could allow an attacker to...

F5 Networks BIG-IP : Qt vulnerability (K000148689)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148689 advisory. An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network...

PT-2024-41439 · Ооо 'Теконавтоматика' · Scada-Система 'Текон'

Уязвимость SCADA-системы «Текон», связанная с передачей учетных данных в незашифрованном виде. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно выполнить атаку «человек посередине» MITM...

Data broker exposes 600,000 sensitive files including background checks

A researcher has discovered a data broker had stored 644,869 PDF files in a publicly accessible cloud storage container. The 713.1 GB container an Amazon S3 bucket did not have password-protection, and the data was left unencrypted, so anybody who stumbled on them could read the files. The files...

Sensitive Data Exposure

apacheairflow is vulnerable to Sensitive Data Exposure. The vulnerability is due to sensitive variable values being logged unencrypted in audit logs when set via the CLI, which allows an attacker with audit log access to view those sensitive values...

CVE-2024-36464 Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

The vulnerability of the web interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) management platform, which involves unencrypted storage of data in files or on disks, allows attackers to disclose protected information.

The vulnerability of the web interface of the Cisco Nexus Dashboard Fabric Controller NDFC management platform involves unencrypted storage of data in files or on disks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...